CVE-2001-0974: oracle internet_directory

EPSS trend

Probability

6.31%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.31% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.31%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

5 links

exchange.xforce.ibmcloud.com/vulnerabilities/6903VDB EntryX Refsource XF
www.securityfocus.com/bid/3048VDB EntryX Refsource BIDPatchVendor Advisory
www.cert.org/advisories/CA-2001-18.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
www.kb.cert.org/vuls/id/869184Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource
www.ciac.org/ciac/bulletins/l-116.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIACPatchVendor Advisory

Related vulnerabilities

CVE-2018-2601oracle corporationinternet directory+11.73%8y ago18-01-2018 02:00Vulnerability in the Oracle Internet Directory component of Oracle Fusion Middleware (subcomponent: Oracle Directory Services Manager). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Internet Directory. While the vulnerability is in Oracle Internet Directory, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.0 Base Score 8.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).CVE-2018-8032apache software foundationapache axis+4810.55%8y ago02-08-2018 13:00Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.CVE-2001-1321oracleinternet_directory5.80%24y ago03-05-2002 04:00Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite.CVE-2001-0300oracleinternet_directory0.61%25y ago04-04-2001 04:00oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack.CVE-2001-0975oracleinternet_directory8.78%24y ago02-02-2002 05:00Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.CVE-2000-0987oracleinternet_directory+11.36%25y ago29-11-2000 05:00Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.

All vulnerabilities ininternet_directory

CVE-2001-0974: oracle internet_directory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References